Merge pull request #193 from esben-semmle/js/reduce-precision-of-remote-property-injection

JS: lower @precision of js/remote-property-injection

Author: asger-semmle

change-notes/1.19/analysis-javascript.md

@@ -16,6 +16,6 @@
 |--------------------------------|----------------------------|----------------------------------------------|
 | Regular expression injection | Fewer false-positive results | This rule now identifies calls to `String.prototype.search` with more precision. |
 | Unbound event handler receiver | Fewer false-positive results | This rule now recognizes additional ways class methods can be bound. |
-
+| Remote property injection | Fewer results | The precision of this rule has been revised to "medium". Results are no longer shown on LGTM by default. |
 
 ## Changes to QL libraries

javascript/ql/src/Security/CWE-400/RemotePropertyInjection.ql

@@ -5,7 +5,7 @@
  *   
  * @kind problem
  * @problem.severity warning
- * @precision high
+ * @precision medium
  * @id js/remote-property-injection
  * @tags security
  *       external/cwe/cwe-250